LOADED_IMAGE Structure

Debug Help Library

LOADED_IMAGE Structure

Contains information about the loaded image.

typedef struct _LOADED_IMAGE {
PSTR ModuleName;
HANDLE hFile;
PUCHAR MappedAddress;
PIMAGE_NT_HEADERS32 FileHeader;
PIMAGE_SECTION_HEADER LastRvaSection;
ULONG NumberOfSections;
PIMAGE_SECTION_HEADER Sections;
ULONG Characteristics;
BOOLEAN fSystemImage;
BOOLEAN fDOSImage;
BOOLEAN fReadOnly;
UCHAR Version;
LIST_ENTRY Links;
ULONG SizeOfImage; } LOADED_IMAGE,
*PLOADED_IMAGE;

Members

ModuleName

The file name of the mapped file.

hFile

A handle to the mapped file.

MappedAddress

The base address of the mapped file.

FileHeader

A pointer to an IMAGE_NT_HEADERS structure.

LastRvaSection

A pointer to an IMAGE_SECTION_HEADER structure.

NumberOfSections

The number of COFF section headers.

Sections

A pointer to an IMAGE_SECTION_HEADER structure.

Characteristics

The image characteristics value. This member can be one of the following values.

Value Meaning

IMAGE_FILE_RELOCS_STRIPPED
0x0001

Relocation information is stripped from the file.

IMAGE_FILE_EXECUTABLE_IMAGE
0x0002

The file is executable (there are no unresolved external references).

IMAGE_FILE_LINE_NUMS_STRIPPED
0x0004

Line numbers are stripped from the file.

IMAGE_FILE_LOCAL_SYMS_STRIPPED
0x0008

Local symbols are stripped from file.

IMAGE_FILE_AGGRESIVE_WS_TRIM
0x0010

Aggressively trim the working set.

IMAGE_FILE_LARGE_ADDRESS_AWARE
0x0020

The application can handle addresses larger than 2 GB.

IMAGE_FILE_BYTES_REVERSED_LO
0x0080

Bytes of word are reversed.

IMAGE_FILE_32BIT_MACHINE
0x0100

Computer supports 32-bit words.

IMAGE_FILE_DEBUG_STRIPPED
0x0200

Debugging information is stored separately in a .dbg file.

IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
0x0400

If the image is on removable media, copy and run from the swap file.

IMAGE_FILE_NET_RUN_FROM_SWAP
0x0800

If the image is on the network, copy and run from the swap file.

IMAGE_FILE_SYSTEM
0x1000

System file.

IMAGE_FILE_DLL
0x2000

DLL file.

IMAGE_FILE_UP_SYSTEM_ONLY
0x4000

File should be run only on a uniprocessor computer.

IMAGE_FILE_BYTES_REVERSED_HI
0x8000

Bytes of the word are reversed.

fSystemImage

If the image is a kernel mode executable image, this value is TRUE.

fDOSImage

If the image is a 16-bit executable image, this value is TRUE.

fReadOnly

If the image is read-only, this value is TRUE.

Version

The version string.

Links

The list of loaded images.

SizeOfImage

The size of the image, in bytes.

Remarks

The LIST_ENTRY structure is defined as follows:

typedef struct _LIST_ENTRY {
   struct _LIST_ENTRY *Flink;
   struct _LIST_ENTRY *Blink;
} LIST_ENTRY, *PLIST_ENTRY, *RESTRICTED_POINTER PRLIST_ENTRY;

Requirements

Redistributable

Requires DbgHelp.dll 5.1 or later.

Header

Declared in DbgHelp.h.

See Also

IMAGE_NT_HEADERS
IMAGE_SECTION_HEADER
ImageLoad
MapAndLoad


Send comments about this topic to Microsoft

Build date: 9/25/2007

© 2007 Microsoft Corporation. All rights reserved.